Audience
Companies looking for a Penetration Testing platform
About Gophish
Gophish is a powerful, open-source phishing framework that makes it easy to test your organization's exposure to phishing. Gophish makes it easy to create or import pixel-perfect phishing templates. Our web UI includes a full HTML editor, making it easy to customize your templates right in your browser. Launch the campaign and phishing emails are sent in the background. You can also schedule campaigns to launch whenever you'd like. Detailed results are delivered in near real-time. Results can be exported for use in reports. Gophish has a gorgeous web interface. Import existing websites and emails, enable email open tracking, and more with a single click. Gophish updates results automatically. Using the UI, you can view a timeline for each recipient, tracking email opens, link clicks, submitted credentials, and more. Everything in Gophish is designed to "just work". It's so easy to setup, easy to use, and quick to give powerful results that you'll think it's magic.
Other Popular Alternatives & Related Software
Terranova Security
Terranova Security makes it easy to build cybersecurity awareness programs that feature the industry’s highest-quality training content and real-world phishing simulations. As a result, any employee can better understand phishing, social engineering, data privacy, compliance, and other critical best practices.
Learn more about Terranova Security
Phishing Club
Phishing Club is an open source phishing simulation and red team phishing framework for authorized security testing. Self host it on your own server via a one line installer or Docker.
Plan, launch, and measure realistic campaigns from a single Go binary with an embedded web UI, HTTP/HTTPS phishing servers, and a REST API.
Features: multi stage phishing flows, flexible scheduling, multiple domains with automatic TLS, SMTP or custom API delivery with OAuth, recipient groups with CSV import and SCIM, PDF campaign reports, analytics, multi tenancy, MFA and
SSO (Entra ID, OIDC), webhooks, and in app updates.
Red team and AiTM: reverse proxy phishing to capture sessions, remote browser phishing, DOM and URL rewriting, dynamic obfuscation, JA4 and geo IP filtering, and device code phishing.
Learn more about Phishing Club
SpamTitan
SpamTitan email security is an email spam filter for businesses, smbs, MSPs, and schools. SpamTitan email security blocks spam as well as phishing and day-zero attacks, viruses, malware, ransomware, and other email threats.
Helps control mail flow, clean it, and protect against unwanted email. We provide easy-to-use yet advanced email security for businesses, smbs and MSPs that are Office365 friendly.
SpamTitan - Premium functionality included:
• CEO Impersonation protection
• Phishing/ Spear phishing protection
• Link analysis
• Full Sandboxing
• Zero Day Attacks protection
• Mail Spooling
• Spoofing protection
• Malware and Ransomware protection
• SPF/DKIM/DMARC checking
• Encryption
• Fully multitenant environment
• Ability to rebrand the entire UI
• Full REST API:
• Comprehensive support and set up docs
Try a FREE, fully supported trial of SpamTitan Email Security today.
Learn more about SpamTitan
Fallax
Fallax runs internal phishing simulations inside your own Google Workspace or Microsoft 365 tenant, trains people the moment they click, and turns the result into audit evidence.
Simulations are injected straight into mailboxes through your tenant, so there is no sending domain and nothing to allowlist: no SPF, DKIM or DMARC setup, no effect on email reputation. Anyone who clicks gets a short training page. Scheduling is per person and automatic, adjusted by how each one handled the last simulation, capped and paced by rules you set.
One export covers ISO 27001, SOC 2, NIS2, DORA, PCI DSS, HIPAA, GDPR Article 32 and NIST CSF, and syncs to Vanta, Drata, Secureframe and Sprinto.
Also included: phishing reports credited automatically from Outlook or a Gmail add-on, app discovery that aims lures at the tools staff really use, department standings, a REST API and an MCP server.
EU-hosted and GDPR compliant. Submitted credentials are never stored. First 10 seats free, permanently
Learn more about Fallax
Integrations
Company Information
Gophish
getgophish.com
Videos and Screen Captures
Other Useful Business Software
Our Free Plans just got better! | Auth0
You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
Product Details
Platforms Supported
Windows
Mac
Linux
Training
Documentation
Support
Online
Gophish Frequently Asked Questions
Q: What kinds of users and organization types does Gophish work with?
Gophish works with these users and organization types: Mid Size Business, Small Business, Enterprise, Freelance, Nonprofit, Government, and Startup.
Q: What languages does Gophish support in their product?
Gophish supports these languages: English.
Q: What kind of support options does Gophish offer?
Gophish offers support via online.
Q: What other applications or services does Gophish integrate with?
Gophish integrates with: Azure Marketplace.
Q: What type of training does Gophish provide?
Gophish provides training in the form of documentation.
